mergelore v0.2.1
Give your PRs the institutional memory that AI-generated code lacks.
Highlights
- Qdrant memory provider - search your full PR history, not just the last 20 merges
- Python indexer service - async PR embedding pipeline (OpenAI, Nomic, Cohere)
- Trivy CVE scanning - critical vulnerabilities block release
- Cosign image signing - supply chain verification for all images
- 71 tests (50 TypeScript + 21 Python), all passing
Quick start
- uses: automationpi/mergelore@v0.2.1
with:
anthropic-api-key: ${{ secrets.ANTHROPIC_API_KEY }}What it catches
mergelore flags when a PR conflicts with a past decision your team already made:
- Re-introduced connection pool limits after a production outage
- Custom dropdowns brought back after an accessibility audit
- Database migration patterns that already caused 8-minute table locks
- Configurable rate limits after they were deliberately hardcoded post-incident
Every finding includes a confidence score, source link to the original PR, and slash commands to acknowledge, override, or update the record.
Memory providers
- Tier 0 - none - just an API key, no history
- Tier 1 - git-native - GitHub API, no extra infra (default)
- Tier 2 - qdrant - full history vector search (free cloud tier)
Docker images
- automationpi/mergelore-action:v0.2.1 - Docker Hub / GHCR
- automationpi/mergelore-indexer:v0.2.1 - Docker Hub / GHCR
Added
- Sample workflows
Full Changelog: v0.2.0...v0.2.1